1. Home
  2. CVE Database
  3. CVE-2019-15622
LOW · 2.4

CVE-2019-15622

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

Vulnerability Description

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

CVSS Score

2.4

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
NextcloudNextcloud< 3.6.1

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2019-15622?

CVE-2019-15622 is a vulnerability with a CVSS score of 2.4 (LOW). Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

How severe is CVE-2019-15622?

CVE-2019-15622 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-15622?

Check the references section above for vendor advisories and patch information. Affected products include: Nextcloud Nextcloud.